$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa File: 30458aaf-8bc5-3f53-9556-5078d9063a6f.roa (raw, json) Hash identifier: uLZ/DMWjKb+URYTnzWB/h2zFKEREtnEowvpVrK7PIrA= Subject key identifier: 88:A7:5C:BC:32:48:3D:33:64:56:29:81:E4:A0:B5:F6:0F:9A:2E:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F843737A8B94329A8AB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396551 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:37:37:a8:b9:43:29:a8:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=dc4a9489-da9f-405a-b57c-f2fc633f6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:17:54:09:df:51:1b:72:ff:2c:e2:b9:88: 3b:98:0e:a5:ff:d1:01:d2:83:c9:ca:e5:86:db:81: 59:a3:e5:af:83:57:1b:b4:9b:a8:dd:7f:d0:d5:0c: f3:a8:b5:0b:dd:92:d6:ff:e1:88:54:76:e0:51:10: d1:25:dc:ac:e0:6d:e8:9b:75:b4:ff:91:f0:04:fb: ab:34:ef:3c:48:32:a9:87:5e:04:e6:b5:fe:38:a0: f2:82:81:64:a8:63:65:9a:bb:bd:49:28:ef:21:31: 71:33:82:77:07:30:63:bd:e7:b6:13:b0:1e:60:6a: f8:37:82:79:ef:01:5f:81:b5:51:70:61:3a:ac:b9: 4d:9b:21:d7:4d:82:e2:d1:50:ec:1f:ac:0f:3f:23: 72:1c:ce:56:26:33:6a:72:9e:a1:0e:a1:e5:27:e5: 26:fd:44:68:a2:eb:b6:67:13:d4:8c:48:1e:4a:d8: e9:6e:da:bd:12:de:a9:54:f8:27:6e:59:4e:54:1f: c0:28:4f:ce:d0:7d:8e:4c:8a:4d:4f:e7:1a:f2:a3: 1b:82:77:fa:71:ab:56:35:70:a1:0e:8f:b1:d9:93: ca:ac:36:ca:b1:63:ad:91:cd:93:10:7c:37:19:09: ed:a1:85:fb:92:c2:1b:c0:d5:64:ed:46:9f:d6:f3: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:5C:BC:32:48:3D:33:64:56:29:81:E4:A0:B5:F6:0F:9A:2E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:99:1c:eb:e6:47:a7:ea:2a:8b:56:cf:34:36:0b:e8:a0:39: 6c:5a:fb:e4:36:a4:82:25:fa:21:7d:82:ed:2e:3f:66:f1:cb: fc:c5:aa:f3:2f:45:15:28:d7:9f:a6:fa:08:b9:4f:19:40:b9: fe:79:46:2d:67:2b:cc:a1:9a:c0:9f:72:ef:17:80:56:49:aa: 1c:55:8d:6f:e8:81:5e:93:50:af:67:6e:51:9d:65:02:47:f2: 4b:ff:59:e1:75:06:eb:22:e8:b2:85:f7:fe:97:a2:03:b2:a5: 4c:00:a2:65:ba:95:6b:78:42:d5:ca:06:9e:90:21:70:a3:d2: 89:78:0a:45:4d:c5:03:cb:cc:5c:9b:26:07:e2:6c:5d:28:37: ab:06:8c:e4:08:20:7a:bf:96:5e:b1:64:7b:64:52:4e:f6:e7: e5:3a:2b:4a:54:5f:21:25:fd:10:52:8b:b4:04:35:38:29:fd: f7:43:80:55:e1:b6:8c:d7:dc:72:4f:7d:aa:87:dc:57:48:7b: 54:b0:f4:b8:10:35:d2:a9:36:df:32:b4:0e:9f:0f:01:75:41: 8c:9d:46:e4:2e:ad:1e:c1:7f:dc:a8:90:92:da:a2:3d:bf:51: 1f:0d:8c:9a:d6:71:e8:f1:6b:fd:ef:22:6c:0b:ef:63:51:23: 8f:eb:69:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Q3N6i5QymoqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGM0YTk0ODktZGE5Zi00MDVhLWI1N2MtZjJmYzYzM2Y2MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxoXVAnfURty/yziuYg7mA6l/9EB0oPJyuWG 24FZo+Wvg1cbtJuo3X/Q1QzzqLUL3ZLW/+GIVHbgURDRJdys4G3om3W0/5HwBPur NO88SDKph14E5rX+OKDygoFkqGNlmru9SSjvITFxM4J3BzBjvee2E7AeYGr4N4J5 7wFfgbVRcGE6rLlNmyHXTYLi0VDsH6wPPyNyHM5WJjNqcp6hDqHlJ+Um/URoouu2 ZxPUjEgeStjpbtq9Et6pVPgnbllOVB/AKE/O0H2OTIpNT+ca8qMbgnf6catWNXCh Do+x2ZPKrDbKsWOtkc2TEHw3GQntoYX7ksIbwNVk7Uaf1vOq9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIinXLwySD0zZFYpgeSgtfYPmi7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0NThhYWYtOGJjNS0z ZjUzLTk1NTYtNTA3OGQ5MDYzYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbmRzr5ken6iqLVs80NgvooDlsWvvkNqSCJfohfYLtLj9m8cv8xarz L0UVKNefpvoIuU8ZQLn+eUYtZyvMoZrAn3LvF4BWSaocVY1v6IFek1CvZ25RnWUC R/JL/1nhdQbrIuiyhff+l6IDsqVMAKJlupVreELVygaekCFwo9KJeApFTcUDy8xc myYH4mxdKDerBozkCCB6v5ZesWR7ZFJO9uflOitKVF8hJf0QUou0BDU4Kf33Q4BV 4baM19xyT32qh9xXSHtUsPS4EDXSqTbfMrQOnw8BdUGMnUbkLq0ewX/cqJCS2qI9 v1EfDYya1nHo8Wv97yJsC+9jUSOP62kx -----END CERTIFICATE-----Generated at Sun May 11 06:24:45 2025 by rpki-client